CVE-2020-14373
Fixed in a distro release EPSS <1%
A use after free was found in igc_reloc_struct_ptr() of psi/igc.c of ghostscript-9.25. A local attacker could supply a specially crafted PDF file to cause a denial of service.
Products: artifex ghostscript, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | ghostscript | 9.27-1.el8 |
| AlmaLinux 8 | ghostscript-doc | 9.27-1.el8 |
| AlmaLinux 8 | ghostscript-tools-dvipdf | 9.27-1.el8 |
| AlmaLinux 8 | ghostscript-tools-fonts | 9.27-1.el8 |
| AlmaLinux 8 | ghostscript-tools-printing | 9.27-1.el8 |
| AlmaLinux 8 | ghostscript-x11 | 9.27-1.el8 |
| AlmaLinux 8 | libgs | 9.27-1.el8 |
| AlmaLinux 8 | libgs-devel | 9.27-1.el8 |
| Debian 12 | ghostscript | 9.26~dfsg-1 |
| Debian 13 | ghostscript | 9.26~dfsg-1 |
| Debian 14 | ghostscript | 9.26~dfsg-1 |
| Red Hat Enterprise Linux 8 | ghostscript | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-debuginfo | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-debugsource | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-doc | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-gtk-debuginfo | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-tools-dvipdf | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-tools-fonts | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-tools-printing | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-x11 | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | ghostscript-x11-debuginfo | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | libgs | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | libgs-debuginfo | 0:9.27-1.el8 |
| Red Hat Enterprise Linux 8 | libgs-devel | 0:9.27-1.el8 |
| Rocky Linux 8 | ghostscript | 0:9.27-1.el8 |
| Rocky Linux 8 | ghostscript | 0:9.27-11.el8 |